Overview

overview

7

Static

static

3

645c21b089...18.exe

windows7-x64

7

645c21b089...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    645c21b089a03453d15d80fa0d50385a_JaffaCakes118

  • Size

    252KB

  • Sample

    240722-xe8d7ssekn

  • MD5

    645c21b089a03453d15d80fa0d50385a

  • SHA1

    951454a04924d8e4be3f5f3f3f419ccbd9742161

  • SHA256

    064843e733169a9cecdac486d7430720a2cf99ce77574134eeb8c35e292ed5b3

  • SHA512

    b68c8b39859bb8197c46294c6d7dabc8291a4e69740b8c927d9499f6b3e84d7b3f232bf2badcb8fbfc0bdca8e80071d93fd5db0d44528ec9ba8d4fa82bf20807

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sdggvkQNLu1P9aPFjnvayjTHo:91OgLdaf5PQFz5Ho

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      645c21b089a03453d15d80fa0d50385a_JaffaCakes118

    • Size

      252KB

    • MD5

      645c21b089a03453d15d80fa0d50385a

    • SHA1

      951454a04924d8e4be3f5f3f3f419ccbd9742161

    • SHA256

      064843e733169a9cecdac486d7430720a2cf99ce77574134eeb8c35e292ed5b3

    • SHA512

      b68c8b39859bb8197c46294c6d7dabc8291a4e69740b8c927d9499f6b3e84d7b3f232bf2badcb8fbfc0bdca8e80071d93fd5db0d44528ec9ba8d4fa82bf20807

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sdggvkQNLu1P9aPFjnvayjTHo:91OgLdaf5PQFz5Ho

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks